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ABSTRACT 



A method and apparatus for digital watermarking to resolve 
multiple claims of ownership is disclosed. According to one 
embodiment of the invention, a first watermark requiring the 
host data for detection is embedded into the host data. A 
second watermark is also embedded into the host data. 
According to another embodiment of the invention, a 
pseudo-random sequence acting as a watermark is generated 
based on two random keys. One of the two random keys is 
related to the author of the host data into which the water- 
mark is to be embedded, whereas the other of the two 
random keys is dependent on the host data itself. 

4 Claims, 3 Drawing Sheets 
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DIGITAL WATERMARKING TO RESOLVE remove, or invalidate the watermark. Generally, a resource- 

MULTIPLE CLAIMS OF OWNERSHIP fill pirate may use a variety of signal processing operations 

to attack a digital watermarking. A pirate may attempt to 

RELATED DOCUMENTS defeat a watermarking procedure in three ways: (1) damage 

„ . A . . . . Ci r Tin n - • i 5 the host media to make the watermark undetectable, (2) 

This application claims the benefit ot U.S. Provisional 4 . ,. , . . , . , . ,. . . . 

a r .• m xmma rv7n a i a a ™ inn* u- u • establish that the watermarking scheme is unreliable, i.e., it 

Application No. 60/024,979, filed Aug. 30, 1996, which is , t _ tc , n „ IO » omn ^ „,u a Jf * 

. " t , ii i- rrn n • • i * i- detects a watermark when none is present, 
hereby incorporated by reference. U.S. Provisional Appli- 
cation No. 60/050,587, filed Jun. 24, 1997, the benefit of Finally, (3) the extracted watermark must also correctly 
which is also claimed, is also hereby incorporated by ref- identify the owner and solve the deadlock issue when 
erence. Co-filed applications entided "Method and Appara- 30 multiple parties claim ownership of a digital work. A dead- 
tus for Embedding Data, Including Watermarks, in Human l° c k may occur when a second party watermarks another 
Perceptible Sounds," application/Control Ser. No. 08/918, person's data, thereby asserting unlawful ownership of 
891 filed Aug. 27, 1997 "Method and Apparatus for Embed- another's intellectual property. That is, the main function of 
ding Data, Including Watermarks, in Human Perceptible a watermarking algorithm is to unambiguously establish and 
Images," application/Control Ser. No. 08/918,122 filed Aug. 15 protect ownership of data. However, many current water- 
27, 1997 and "Method and Apparatus for Video marking schemes are unable to resolve rightful ownership of 
Watermarking," application/Control Ser. No. 08/918,125 digital data when multiple ownership claims are made, i.e., 
filed Aug. 27, 1997 and "Method and Apparatus for Scene- when a deadlock problem arises. The inability to deal with 
Based Video Watermarking," application/Control Ser. No. deadlock is independent of how the watermark is inserted in 
08/921,931 are filed Aug. 27, 1997 also hereby incorporated 20 the digital data or how robust it is to various types of 
by reference. modifications. 

Watermarking techniques which do not require the origi- 

STATEMENT REGARDING GOVERNMENT nal ( non -watermarked) signal are the most vulnerable to 

RIGHTS ownership deadlocks. A pirate simply adds his or her water- 

The present invention was made with government support mark to watermarked data. The data now has two 

by AFOSR under grant AF/F49620-94-1-0461, and by watermarks. Prior art watermarking schemes are typically 

ARPA under grant USDOC6NANB2D1272. The Govern- unable to establish who watermarked the data first, 

ment has certain rights in this invention. Watermarking procedures that require the original data set 

30 for watermark detection also suffer from deadlocks. In such 

FIELD OF THE INVENTION schemes, a party other than the owner may counterfeit a 

This invention relates generally to techniques for embed- watermark by "subtracting off" a second watermark from the 

ding data such as watermarks, signatures and captions in publicly available data and claim the result to be his or her 

digital data, and more particularly to digital watermarking to original. This second watermark allows the pirate to claim 

resolve multiple claims of ownership. 35 copyright ownership since he or she can show that both the 

publicly available data and the original of the rightful owner 

BACKGROUND OF THE INVENTION contain a copy of their counterfeit watermark. 

The world wide web, Internet, and many other distributed lt would scm that the original (non-watermarked) media 

networks continue to provide opportunities for new and 40 should be able to resolve the deadlock issue. Party A should 

improved digital information dissemination. Digital audio, nave an original which does not contain Party B's 

video, and images may be easily distributed, reproduced, watermark. On the other hand, Party B's "original" must 

and manipulated. However, these efficiencies also increase have Part y A ' s watermark, since it is derived from the data 

the problems associated with copyright enforcement. For Part y A watermarked and distributed. However, current 

this reason, creators and distributors of digital data are 45 watermarking techniques are susceptible to an intelligent 

hesitant to provide access to their intellectual property. attack b y Part y B which destroys this logic. In particular, 

Reliable solutions to the problems associated with copyright Part y B ™ n creale a watermark W* which shows up in Party 

protection of multimedia data are actively being pursued. A ' s °ngmal S 0 ^. Both originals, one from each party, 

Digital watermarking has been proposed as a means to coatains ^ others watermark - ™ us > a deadlock * created - 
identify the owner or distributor of digital data. Watermark- 50 p arty B's watermark is created by "subtracting off" a 
ing is the process of encoding hidden copyright information second watermark from the publicly available data. The 
in digital data by making small modifications to the data difference is declared Party B's "original." For example, 
samples. Unlike encryption, watermarking does not restrict suppose Party A watermarks data S orig A using their water- 
access to the data. Once encrypted data is decrypted, the mark W\ and allows the watermarked data 
media is no longer protected. A watermark is designed to 55 
permanently reside in the host data. When the ownership of sig,„ = sj n> +• w A 
a digital work is in question, the information can be 
extracted to characterize the owner. 

A digital watermark is designed to be perceptually and to be accessible to the public. Party B takes the watermarked 

statistically invisible with the host media (e.g., image, audio, 60 data S water and creates their own "original" data S water * by 

or video). This ensures that the watermark does not degrade subtracting off a second watermark W*: 

the host media. It also helps to prevent illegal removal of the * 

copyright protection by a "pirate." The watermark is also s*^ =si aer -w 8 . 
designed to be robust to signal distortions, incidental and 

intentional, applied to the host data. Possible distortions 65 

include normal signal processing operations, e.g., coding, Thus, both watermarks W* and W fl exist in the publicly 

filtering, scaling, etc., and deliberate attempts to forge, available data S wtt) , A : 
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When S warer A is tested for W x aod W*, both will be 
positively identified. The originals from each party may be 
consulted. Party A can find their watermark W A in Party B's 
original as 



However, Party B can find their watermark W* in Party A's 
original, as 



As a result, this second watermark allows the pirate to claim 
copyright ownership since he or she can show that both the 
publicly available data and the original of the rightful owner 
contain a copy of their counterfeit watermark. Thus, there is 
a need for watermarking procedures applicable to digital 
data that do not suffer from the described shortcomings, 
disadvantages and problems. 

SUMMARY OF THE INVENTION 

The above-identified shortcomings, disadvantages and 
problems found within the prior art are addressed by the 
present invention, which will be understood by reading and 
studying the following specification. The invention provides 
for the watermarking of digital data to resolve multiple 
claims of ownership. 

In one embodiment of the invention, an author represen- 
tation is based on the host digital data signal. An author is 
represented with a pseudo-random sequence (i.e., the 
watermark) created by a pseu do -random generator and two 
keys. One key is author dependent, while the second key is 
signal dependent. The representation is able to resolve 
rightful ownership in the face of multiple ownership claims. 

In another embodiment of the invention, a watermarker 
uses two watermarks. A watermarking scheme uses the 
original signal to detect the presence of a watermark. This 
watermark is integrated with a second watermark that does 
not require the original signal. These embodiments of the 
invention solve the deadlock problem described in the 
background section of the application. 

Further aspects, advantages and embodiments of the 
invention will become apparent by reference to the 
drawings, and by reading the following detailed description. 

BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1(a) is a diagram of a system to embed a watermark 
in digital host data, according to an embodiment of the 
invention; 

FIG. 1(b) is a diagram of a system of a system to detect 
and compare a watermark embedded in digital host data, 
according to an embodiment of the invention; 

FIG. 2 is a diagram of a typical computer to be used with 
embodiments of the invention; 

FIG. 3 is a diagram of a watermarker to resolve the 
deadlock issue according to one embodiment of the inven- 
tion; and, 



FIG. 4 is a diagram of a watermark generator to generate 
watermarks so as to resolve the deadlock issue according to 
one embodiment of the invention. 

s DETAILED DESCRIPTION OF THE 

INVENTION 

In the following detailed description of the preferred 
embodiments, reference is made to the accompanying draw- 
ings which form a part hereof, and in which is shown by way 

10 of illustration specific preferred embodiments in which the 
invention may be practiced. These embodiments are 
described in sufficient detail to enable those skilled in the art 
to practice the invention, and it is to be understood that other 
embodiments may be utilized and that logical, mechanical 

15 and electrical changes may be made without departing from 
the spirit and scope of the present invention. The following 
detailed description is, therefore, not to be taken in a limiting 
sense. 

Overview of the Watermarking and Watermark Detecting 
20 Processes 

A watermarking system for digital media consists of two 
parts: (1) embedding the watermark in digital host data, and 
(2) detecting the watermark within the digital host data to 
identify the owner. The first part is described in reference to 

25 FIG. 1(a), whereas the second part is described in reference 
to FIG. 1(6). A diagram of a system to embed a watermark 
in digital host data is shown in FIG. 1(a). The multimedia 
digital host data to be watermarked may be an image, an 
audio clip, or a video sequence. S or ^ denotes the original 

30 multimedia signal without any watermark. Furthermore, W 
denotes the watermark which the owner wishes to embed 
and S^,,,. denotes the the signal with the embedded water- 
mark. Watermarker 10 embeds the watermark into the origi- 
nal signal to produced the watermarked signal, Watermarker 

35 10 may be a computerized system, having hardware and/or 
software components; the invention is not so particularly 
limited. The watermark W is embedded into S orig by an 
embedding function performed by watermarker 10 sand 
generally written as 

40 

The embedding function E makes small modifications to 
S or ^ according to W. For example, if W=(w a , w 2 , . . . )=(1, 

45 0 t 1, 1, 0, . . . ), the embedding function may add or subtract 
a small amount a from each pixel or sample of S on ^ 
according to whether w ( »l or 0. 

Referring next to FIG. 1(b), a diagram of a system to 
detect and compare a watermark embedded in digital host 

50 data is shown. Detector 12 extracts a sequence W from a 
received signal R being tested, using knowledge of W and 
possibly S orig . Detector 12 may be a computerized system, 
having hardware and/or software components; the invention 
is not so particularly limited. The sequence W is extracted 

55 by a detecting function performed by detector 12 and 
generally written as 

The test signal R may or may not be the watermarked (and 
60 possibly distorted) signal S„ a , er . Comparator 14 compares 
the extracted sequence W with the original watermark W to 
determine whether the recovered signal is watermarked. 
Comparator 14 may be a computerized system, having 
hardware and/or software components; the invention is not 
65 so particularly limited. The comparison performed by com- 
parator 14 is in one embodiment a correlation measure C and 
a binary decision is made: 
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c a a 
otherwise 



where c is the value of the correlation and a is a threshold. 
A 'T indicates a watermark was detected, while a i 0 i 
indicates that no watermark was detected. In other words, if 
W and W are sufficiently correlated (greater than some 
threshold), the signal is declared watermarked and the author 
has ownership rights to the media. Otherwise the media R is 
deemed free from copyright protection. 

The invention is not particularly limited to any three-tuple 
(E, D, C) computerized system for embedding, detecting, 
and comparing purposes. That is, any watermark technique, 
characterized in terms of the three-tuple (E, D, Q as 
described above may be amenable to the invention as 
otherwise described in this application. Specifically, inas- 
much as any watermark technique is amenable to the inven- 
tion to resolve the deadlock issue as has been described (i.e., 
resolve multiple claims of ownership), the technique is 
within the scope of the invention as is claimed. 

Several watermarking techniques in general are known 
within the art. Many such techniques are based on adding 
fixed amplitude pseudo-noise (PN) sequences to an image. 
In this case, E and D are simply the addition and subtraction 
operators, respectively. PN sequences are also used as the 
"spreading key" when considering the host media as the 
noise in a spread spectrum system, where the watermark is 
the transmitted message. In this case, the PN sequence is 
used to spread the data bits over the spectrum to hide the 
data. When applied in the spatial or temporal domains, these 
approaches modify the least significant bits (LSB) of the 
host data. Invisibility of the watermark is based on the 
assumption that the LSB data are insignificant. The water- 
mark is generally recovered using knowledge of the PN 
sequence (and perhaps other secret keys, like watermark 
location) and the statistical properties of the embedding 
process. 

Several spatial techniques for watermarking also exist in 
the art. For example, a statistical technique may be used 
which randomly chooses n pairs (a i( b ( ) of points in an image 
and increases the brightness of by one unit a,, while simul- 
taneously decreasing the brightness of b f . Another such 
technique hides data by mapping a random texture pattern in 
an image to another region in the image with a similar 
texture pattern. This method is limited to images that possess 
large areas of random texture. 

In other copyright protection schemes, the watermarks are 
made to appear as quantization noise when embedded into 
the images. A predictive coding scheme may be used to 
embed the watermark into the image. Or, the watermark may 
be embedded into the image by dithering the image based on 
the statistical properties of the image. In another scheme, a 
watermark for an image is generated by modifying the 
luminance values inside 8x8 blocks of pixels, adding one 
extra bit of information to each block. The choice of the 
modified block is secretly made by the encoder. 

Furthermore, the Xerox Data-Glyph technology, known 
within the art, adds a bar code to its images according to a 
predetermined set of geometric modifications. In another 
scheme, data is hidden in the chrominance signal of NTSC 
by exploiting the temporal over-sampling of color. Still 
another watermarking scheme provides for constructing a 
watermark by concealing graph data in the LSB's of the 
image. 

Transform based watermarking techniques have also been 
proposed in the art. To embed a watermark, a transformation 



is applied to the host data, and modifications are made to the 
transform coefficients. Possible image transformations 
include the FFT, discrete cosine transform (DCT), wavelet, 
subband, Hadamard, and others. A JPEG model based, 

5 frequency hopped, randomly sequenced pulse position 
modulated code is posited in accordance with one particular 
approach. The approach modifies the difference between 
randomly selected mid frequency components in random 
image blocks. Setting linear or circulant constraints on the 

10 middle frequency DCT coefficients of random image blocks 
is done in one specific scheme. In another scheme, the 
middle band DCT coefficients of image blocks are modified 
to hold signature data. 
Another watermarking scheme proffers a codeword that is 

15 generated and used to modulate selected coefficients of the 
DCT or wavelet transform of a block in an image. In a 
different scheme, the scheme causes perturbance of the 
phase of FFT coefficients of 8x8 image blocks to embed a 
watermark. The largest DCT components of an image are 

20 modified by Gaussian noise in one particular watermarking 
scheme. Another scheme embeds digital data into analog TV 
signals. The method substitutes high-spatial frequency 
image data for "hidden" data in a pyramid-encoded image. 
A phase coding approach is used in a different scheme to 

25 embed a watermark in audio signals. The data is embedded 
by modifying the phase values of Fourier Transform coef- 
ficients of audio segments. Another audio watermarking 
technique is proposed replaces Fourier Transform coeffi- 
cients over the middle frequency bands with the signature 

30 spectral components. A method to watermark compressed 
video by modifying the MPEG bitstream is also in a scheme 
within the art. 

All such watermarking, detecting and comparing schemes 
may be amenable to the resolution of deadlock aspect of the 

35 invention. Furthermore, in particular, sound, image, and 
video watermarking embodiments of the inventions of the 
patent applications co-filed herewith are specifically ame- 
nable to the invention. These embodiments ensure robust 
and imperceptible watermarks. 

40 Hardware Implementation of the Invention 

The present invention is not limited as to the type of 
computer on which it runs. However, a typical example of 
such a computer is shown in FIG. 2. Computer 16 is a 
desktop computer, and may be of any type, including a 

45 PC-compatible computer, an Apple Macintosh computer, a 
UNIX-compatible computer, etc. Computer 16 usually 
includes keyboard 18, display device 20 and pointing device 
22. Display device 20 can be any of a number of different 
devices, including a cathode -ray tube (CRT), etc. Pointing 

50 device 22 as shown in FIG. 2 is a mouse, but the invention 
is not so limited. Not shown is that computer 16 typically 
also comprises a random-access memory (RAM), a read- 
only memory (ROM), a central -processing unit (CPU), a 
fixed storage device such as a hard disk drive, and a 

55 removable storage device such as a floppy disk drive. The 
computer program to implement the present invention is 
typically written in a language such as C, although the 
present invention is not so limited. 

The specifics of the hardware implementation of the 

60 invention have been described. A particular implementation 
of the invention is now described. 

Implementation of the Invention Resolving the Deadlock 
Issue 

Referring to FIG. 3, a diagram of a watermarker, which 
65 may be used as watermarker 10, to resolve the deadlock 
issue according to . one embodiment of the invention is 
shown. For example, two parties may claim ownership of an 
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audio clip. To determine the rightful owner of the audio clip, 
an arbitrator examines only the audio clip in question, the 
originals of both parties and the key used by each party to 
generate their watermark. 

The dual watermark approach of FIG. 3 employs a pair of 5 
watermarks, one embedded by sub-watermarker 24, and 
another embedded by sub-watermarker 26. Each of sub- 
watermarker 24 and sub-watermarker 26 may be a comput- 
erized system, having hardware and/or software compo- 
nents; the invention is not so particularly limited. The 10 
watermarking procedure followed by sub-watermarker 24 
requires the original data set for watermark detection. Sub- 
watermarker 24 embeds watermark Wl within S orig in 
accordance with an amenable watermarking scheme, as have 
been described, to which the invention is not particularly 15 
limited. 

The second watermarking procedure followed by sub- 
watermarker 26 does not require the original data set and 
hence, is a more simple data hiding procedure. Sub- 
watermarker 26 embeds watermark W2 within S orig in 20 
which Wl has already been embedded. Any number of 
procedures can be used to insert the second watermark, as 
have been described, and the invention is not particularly 
limited. The output of sub-watermarker 26 is S water7 which 
is the original signal including both embedded watermarks. 25 

The second watermark need not be highly robust to 
editing of the data segment since it is meant to protect the 
data that a pirate claims to be his original. The robustness 
level of many watermarking techniques that do not require 
the original for watermark detection is quite adequate. The 30 
arbitrator would expect the original to be of a high enough 
quality. This limits the operations that a pirate can apply to 
a host data and still claim it to be his high quality original 
data. The watermark that requires the original audio 
sequence for its detection is very robust. 35 

In case of deadlock, the arbitrator first checks for the 
watermark that requires the original for watermark detec- 
tion. If the pirate is clever and has used the attack suggested 
in and outlined above, the arbitrator would be unable to 
resolve the deadlock with this first test. The arbitrator then 40 
checks for the watermark that does not require the original 
audio sequence in the audio segments that each ownership 
contender claims to be his original. Since the original audio 
sequence of a pirate is derived from the watermarked copy 
produced by the rightful owner, it will contain the watermark 45 
of the rightful owner. On the other hand, the true original of 
the rightful owner will not contain the watermark of the 
pirate since the pirate has no access to that original and the 
watermark docs not require subtraction of another data set 
for its detection. 50 

Besides dual watermarking, the invention also provides 
another approach to resolve deadlock: a dependent water- 
marking scheme. Referring now to FIG. 4, a diagram of a 
watermark generator, to generate such watermarks as Wl 
(and, alternatively, also W2), so as to resolve the deadlock 55 
issue according to one embodiment of the invention, is 
shown. That is, further protection against deadlock is pro- 
vided by the technique used to select the pseudo-random 
sequence that represents the author (i.e., the sequence being 
the watermark). 60 

Specifically, the author has two random keys x 1 and x 2 
(i.e., seeds) from which a pseudo-random sequence y can be 
generated using watermark generator 28, which in one 
embodiment is a suitable pseudo-random sequence genera- 
tor. Watermark generator 28 may be a computerized system, 65 
having hardware and/or software components; the invention 
is not so particularly limited. Popular generators include 



RSA, Rabin, Blum/Micali, and Blum/Blum/Shub, all of 
which are known within the art. With the two proper keys, 
the watermark may be extracted. Without the two keys, the 
data hidden in the audio is statistically invisible and impos- 
sible to recover. Note that the invention does not use the 
classical maximal length pseudo noise sequence (i.e., 
m-sequence) generated by linear feedback shift registers to 
generate a watermark. Sequences generated by shift regis- 
ters are cryptographically insecure: one can solve for the 
feedback pattern (i.e., the keys) given a small number of 
output bits y. 

The noise-like sequence y, after some processing; is the 
actual watermark hidden into the data stream. The key x 2 is 
author dependent, and is thus shown in FIG. 4 as directly 
being input into generator 28 without being output by a 
specific generator itself. Conversely, the key x 2 is signal 
dependent. The key x 2 is generated by signal -dependent key 
generator 30, which has as an input the original signal S orig . 
Generator 30 may be a computerized system, having hard- 
ware and/or software components; the invention is not so 
particularly limited. Thus, watermark generator 28 generates 
a watermark y, which may be used as watermark W 3 or W 2 , 
in the context of the watermarker of FIG. 3, based on the 
input of Xj and the output x 2 of generator 30. 

The key x 2 is assigned to (or chosen by) the author (that 
is, related to the author). Key x 2 is computed from the signal 
which the author wishes to watermark. It is computed from 
the host signal using a one-way hash function, by* generator 
28. In one embodiment, the tolerable error levels supplied by 
the masking models described in Swanson, Zhu, and Tewfik, 
"Transparent Robust Image Watermarking," in Proceedings 
1996 International Conference on Image Conferencing, Vol- 
ume III (Lausanne, Switzerland), pp. 211-214, 1996; Boney, 
Tewfik, and Hamdy, "Digital Watermarks for Audio 
Signals," in Proceedings 1996 IEEE International Confer- 
ence on Multimedia Comp. and Systems (Hiroshima, 
Japan), pp. 473^180, 1996; and, Swanson, Zhu, and Twefik, 
"Object-based Transparent Video Watermarking," in Pro- 
ceedings 1997 IEEE Multimedia Signal Processing Work- 
shop Princeton, N.J.), pp. 369-374, 1997; all three refer- 
ences which are hereby incorporated by reference, are 
hashed to a key x 2 . 

Furthermore, any one of a number of secure one-way hash 
functions known in the art may be used to compute x 2 , 
including those known as RSA, MD4, and SHA. For 
example, the Blum/Blum/Shub pseudo-random generator 
uses the one way function y=g n (x)=x 2 mod, n, where n=pq 
for primes p and q so that p=3 mod 4. It is known that 
generating x or y from partial knowledge of y is computa- 
tionally infeasible for the Blum/Blum/Shub generator. 

The signal dependent key x 2 generated by generator 30 
makes counterfeiting very difficult. The pirate can only 
provide key x 3 to the arbitrator. Key x 2 is computed by the 
watermarking algorithm from the original signal. The pirate 
generates a counterfeit original by subtracting off a water- 
mark. However, the watermark (partially generated from the 
signal dependent key) depends on the counterfeit original. 
Thus, the pirate must generate a watermark which creates a 
counterfeit original which, in turn, generates the watermark. 
As it is computationally infeasible to invert the one-way 
hash function, the pirate is unable to fabricate a counterfeit 
original which generates the desired watermark. Thus, the 
dual-watermarking and the host signal-dependent key 
aspects of the invention solve the deadlock problem. 

Although specific embodiments have been illustrated and 
described herein, it will be appreciated by those of ordinary 
skill in the art that any arrangement which is calculated to 
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achieve the same purpose may be substituted for the specific 
embodiments shown. This application is intended to cover 
any adaptations or variations of the present invention. 
Therefore, it is manifestly intended that this invention be 
limited only by the following claims and equivalents 5 
thereof. 
I claim: 

1. A computerized method for watermarking host data 
comprising: 

embedding a first watermark into original host data to 10 
produce watermarked host data, wherein the first water- 
mark requires the original host data in order to be 
detected; and, 

embedding a second watermark into the watermarked host 
data, wherein the second watermark does not require 
the original host data to be detected and wherein the 
second watermark identifies an authentic owner of the 
host data when the first watermark is subtracted off the 
watermarked host data. 

2. A computerized method for watermarking host data 20 
comprising: 

embedding a first watermark into original host data to 
produce watermarked host data, wherein the first water- 
mark requires the original host data in order to be 25 
detected and is generated as a pseudo -random 
sequence; and, 

embedding a second watermark into the watermarked host 
data, wherein the second watermark does not require 
the original host data to be detected; 



15 



wherein the pseudo- random sequence is based on two 
random keys, one of the two random keys dependent on 
the host data. 

3. A computerized system for watermarking host digital 
data comprising: 

a first sub-watermarker to embed a first watermark into 
original host data to produce watermarked host data, 
the first watermark requiring the original host data for 
detection; and, 

a second sub-watermarker to embed a second watermark 
into the watermarked host data, wherein the second 
watermark does not require the original host data for 
detection and wherein the second watermark identifies 
an authentic owner of the host data when the first 
watermark is subtracted off the watermarked data. 

4. A computerized method for watermarking host data 
comprising: 

embedding a first watermark into original host data to 
produce watermarked host data, said first watermark 
generated as a psendo -random sequence based on two 
random keys, and wherein the first watermark requires 
the original host data in order to be detected; and, 

embedding a second watermark into the watermarked host 
data, wherein the second watermark does not require 
the original host data to be detected. 
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